Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/8HaLB5TEdn8-JprhSyRuCcjMoZg.roa
File: 8HaLB5TEdn8-JprhSyRuCcjMoZg.roa (raw, json)
Hash identifier: UthzthfyoDoHd5r7bkYaR7/pKFLe7BCz0OHpJ13iU/0=
Subject key identifier: F0:76:8B:07:94:C4:76:7F:3E:26:9A:E1:4B:24:6E:09:C8:CC:A1:98
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 018CCA2A50638AF61A5C5121701B5A1132F1
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/8HaLB5TEdn8-JprhSyRuCcjMoZg.roa
Signing time: Tue 02 Jan 2024 12:33:39 +0000
ROA not before: Tue 02 Jan 2024 12:33:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209926
IP address blocks: 92.38.4.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft
rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 May 2024 23:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:50:63:8a:f6:1a:5c:51:21:70:1b:5a:11:32:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 12:33:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f0768b0794c4767f3e269ae14b246e09c8cca198
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:4e:13:c3:9d:75:5f:ad:5e:1f:6e:45:36:f2:
0b:92:7e:33:79:5a:62:bd:c3:81:28:1a:2e:bb:2c:
39:f5:ab:3b:64:66:e6:67:c6:01:0a:1c:67:90:7a:
cd:57:ac:16:1d:c2:44:15:3d:0d:cc:49:36:15:fa:
35:4c:dc:ae:2c:54:62:bf:94:ea:c8:b1:43:16:a7:
ad:96:e3:f6:36:d3:ba:df:53:6e:8d:df:f2:46:85:
25:62:4f:13:89:ea:7e:e6:25:33:aa:8e:74:3f:d7:
8a:ff:aa:7d:5c:b1:04:b4:76:a9:c1:5a:d8:e5:90:
19:db:8d:fc:a2:fa:f8:ac:19:a1:0c:3c:b4:ce:d5:
17:aa:59:82:53:7c:e6:eb:6e:18:a6:5d:76:f8:ed:
6b:40:57:18:aa:1b:f0:0b:2e:1b:12:13:37:ac:a0:
51:9c:a6:fe:91:c0:32:de:61:08:82:cd:46:62:bd:
11:7c:bb:37:4f:8e:40:aa:5c:40:3a:f0:28:59:85:
ea:a0:90:ae:34:54:3a:3b:a9:2a:77:a5:89:c6:02:
b8:02:8a:5f:76:71:67:3d:46:13:1e:be:e0:21:64:
4b:5c:0c:74:3c:0c:55:c2:1d:1f:fa:c9:03:99:c3:
8b:17:77:9b:fa:99:42:bf:0d:73:42:f5:55:dd:64:
c3:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:76:8B:07:94:C4:76:7F:3E:26:9A:E1:4B:24:6E:09:C8:CC:A1:98
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/8HaLB5TEdn8-JprhSyRuCcjMoZg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.38.4.0/24
Signature Algorithm: sha256WithRSAEncryption
75:67:4b:26:9f:27:09:e6:b4:6f:bd:46:50:b3:fd:7a:43:72:
3f:4e:23:cb:42:8a:f5:0c:33:1c:07:81:cc:74:0d:8f:ee:15:
88:20:63:60:8a:01:50:71:aa:88:fb:6e:1b:ac:7e:a1:e6:ae:
d9:e7:08:cb:18:26:2d:3c:8a:77:9a:42:cf:29:f7:72:1e:2c:
ac:95:dd:26:ae:e1:93:8b:9a:ce:ca:61:f4:16:21:56:92:02:
1b:76:6c:c8:fe:69:f5:16:15:74:da:e8:44:e9:c9:e2:00:46:
d1:f4:86:18:86:d6:fe:4d:da:50:83:2d:ec:b7:22:53:55:66:
cd:f2:55:dc:5d:e6:06:f0:70:98:a8:e4:90:48:e6:7e:01:aa:
b5:1d:52:9e:69:52:40:19:39:cf:b5:41:25:e7:88:5d:28:b0:
6f:fc:59:fc:95:57:bb:b9:ff:4e:c7:4d:91:f2:98:f8:07:7f:
33:94:20:c0:6b:d4:7b:30:4a:04:02:3e:f3:d5:3c:08:c2:99:
07:30:a9:a4:47:6d:6d:f3:69:27:9b:8b:ff:d8:a6:af:60:11:
1d:d1:1a:8d:8b:d8:02:84:a8:66:b5:3d:f3:98:e0:72:c0:37:
df:c3:a4:9f:81:26:4c:8a:d8:91:c9:46:db:f7:02:73:ab:da:
48:e2:33:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 29 07:36:50 2024 by rpki-client on console-fra.rpki-client.org